From f5823216d08e21c637f7abc3031c7c60ef105d7b Mon Sep 17 00:00:00 2001 From: Joseph Sutton Date: Mon, 20 Dec 2021 15:14:23 +1300 Subject: [PATCH] kdc: Return error code from _kdc_check_pac() with an armor ticket This allows a TGT_REVOKED error to be returned to match Windows behaviour. Signed-off-by: Joseph Sutton --- kdc/fast.c | 3 --- 1 file changed, 3 deletions(-) diff --git a/kdc/fast.c b/kdc/fast.c index e1e964d9f..5d2a97a6d 100644 --- a/kdc/fast.c +++ b/kdc/fast.c @@ -859,9 +859,6 @@ _kdc_fast_check_armor_pac(astgs_request_t r) krb5_free_error_message(r->context, msg); - if (ad_kdc_issued == FALSE || mspac == NULL) - ret = KRB5KDC_ERR_BADOPTION; - goto out; }